Hi, folks,

I'm following the instructions in the 1.7 user manual to set up Kerberos
impersonation. I'm using Ambari 2.1.2.1 to specify the configuration in
accumulo-site.xml.

If I understand the manual correctly, I need to define a property key of
the form: instance.rpc.sasl.impersonation.username/server@REALM.users. The
value should be a CSV list of kerberos principals.

The problem is that Ambari will reject a property key with the characters
"@" or "/". Is Ambari being overly restrictive or have I misunderstood the
user manual? Is there any workaround other than manually editing
accumulo-site.xml (which I think will be overwritten as soon as Ambari
discovers that it's out-of-sync)?

Thanks,
-Russ

Reply via email to